Principal, GRC Cyber Risk Management

Lead enterprise cyber risk identification, assessment, prioritization, and executive risk reporting within Northern Trust’s Cybersecurity Governance, Risk and Compliance organization. Drive modernization by integrating threat intelligence, attack surface insights, vulnerability trends, and control effectiveness into data-driven decision-making. Conduct assessments aligned to NIST CSF, FAIR, MITRE ATT&CK, CRI, and ISO 27001, and translate technical risks into clear business impact narratives for leadership, risk committees, and regulators.